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CLAIMS 
I Claim: 

1 . (Amended) A storage system with data recovery from M failed blocks per 
stripe or J failed storage units comprising N (N>0) data blocks stored on N 
storage units and a first error correction code that generates M (M>0) 
redundant blocks from the N data blocks where the N data blocks and M 
redundant blocks form a stripe,, wherein the M redundant blocks are stored 
on J (J less than or equal to M but at least one) additional storage units 
such that K failed data blocks (K less than or equal to M) blocks are 
regenerated from the remaining N+M-K blocks of the stripe , whoro tho M 
r e dundant b l ocks aro stored on J (J<M) addit i onal storag e un i t e ; or 

P storage units fail (P less than or equal to J) containing data blocks 
wherein the data blocks in the failed storage units are regenerated from 
the remaining data blocks and remaining redundant blocks of the stripe . 

2. (Amended) The storage system with data recovery from M fa i l e d block s 
p e r stripe or J fail e d storage unit s-of claim 1 wherein the storage for the 
redundant blocks is rotated among the N+J storage units such that the 
storage requirement is evenly distributed. 

3. (Amended) The storage system with data r e cov o ry from Ml fal l od blocko 
p e r strip o or J failod storag o un i t e of claim 1 wherein the storage for the 
redundant blocks is rotated among the N+J storage units such that the 
storage accesses to the redundant blocks a re mor e evon l v uniformlv 
distributed. 

4. (Amended) The storage system with data rocovory from M fa il od blocks 
p e r strip o or J failod s torag e unit e- o f claim 1 wherein the storage system 
provides additional data recovery from J failed storage units and L failed 
blocks per stripe wherein: 

L (L less than or eoual to M) redundant blocks that are copies of the M 
redundant blocks of a stripe are stored on the storage unit with the most 
recent data block update for the stripe : and 
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in the event of failure of storage units with the M redundant blocks , the L 
copies of the redundant blocks are used to reconstruct up to L failed 
blocks of the stripe. 

5. (Amended) The storage system w i th data r e cov e ry from M fa i led b l ocks 
p e r strip e or J failed storag e un i ts of claim 1 wherein the storage system 
provides additional data recovery from J failed storage units and L failed 
data blocks per stripe wherein: 

L (L less than or equal to M) redundant blocks that are copies of the M 
redundant blocks of a stripe are stored on the storage unit with the most 
recent data block update for the stripe : and 

the storage blocks for the L copies of the redundant blocks are assigned 
as needed from a pool of storage blocks. 

6. (Amended) The storage system with data recovery from M fa ile d blocks 
p e r s trip e or J fail e d storage units o f claim 1 wherein the storage system 
provides additional data recovery from J failed storage units and L failed 
blocks in the stripe and R failed blocks for each stripe of a second stripe 
structure within each storage unit wherein: 

L (L less than or equal to M) redundant blocks that-are copies of the 
M redundant blocks of a stripe and are stored on the storage unit 
with the most recent data block update for the stripe? -; and 
g rouping fer^-S (S>0) blocks stored on a storage unit including one 
block from the stripe, a second error correction code generates R 
redundant blocks from the S blocks and the R redundant blocks are 
stored on the storage unit to form a second stripe: 
such that V failed data blocks (V less than or equal to R) b l ocks are 
regenerated from the remaining S+R-V blocks of the second strip o and tho 
R redundant blocks ar e s tored on the storag e unit . 

7. (Amended) The storage system with d a ta r e covery from M fa i led b l ocks 
por stripo or J f a iled storag e un i ts of claim 1 wherein the storage system 
provides additional data recovery from J failed storage units and R failed 
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blocks for each stripe of a second stripe structure in each functioning 
storage unit where; 

S for S (S>0) blocks stored on a storage unit including one block from 

the stripe, a second error correction code generates R redundant 
blocks from the S blocks; and 

the R redundant blocks are stored on the storage unit to form a 
second stripe: 

such that V failed data blocks (V less than or equal to R) blocks are 
regenerated from the remaining S+R-V blocks of the second stripe-an44he 
Re dundant b l ocks a r e storod on tho ctoraao u nit 

8. (Amended) A storage system with data recovery from L failed blocks per 
stripe comprising N (N>0) data blocks stored on H (H> 0 greater than or 
equal to N+1) storage units , one data block per storage unit and a first 
error correction code that generates M (M>0) redundant blocks from the N 
data wherein: 

the N data blocks and the M redundant blocks form a stripe such that K 
failed data blocks (K less than or equal to M) blocks are regenerated from 
the remaining N+M-K blocks of the stripe; and 

L (L less than or equal to M) redundant blocks are stored on the storage 
unit with the most recent data block update; 
such that when one or more of the M redundant blocks are not 
accessible, T (T less than or equal to L) data blocks are regenerated from 
the remaining N+L-T blocks of the stripe. 

9. (Amended) The storage system with data r e cov e ry from L failed b l ocks 
p er st ri p e of claim 8 wherein the storage blocks for the L redundant blocks 
are assigned as needed from a pool of storage blocks. 

10. (Amended) The storage system with data r e cov e ry from L failod blocks 
p e r strip e of claim 8 wherein the storage system provides additional data 
recovery from J failed storage units or M failed blocks per stripe wherein: 

the number of data blocks, N. equals the number of storage units, 
H, each with a data block from the stripe: and 
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the M redundant blocks for the stripe are stored on J (J less than or 
equal to M but at least one) additional storage units; 
such that P storage units fail (P less than or equal to J) containing data 
blocks wherein the data blocks on the failed storage units are 
regenerated from the remaining data blocks and redundant blocks of the 
stripe. 

1 1 . (Amended) The storage system with data rocovory from L fail e d blocks 
per s t ri p e o f claim 8 wherein the storage system provides additional data 
recovery from J failed storage units or M failed blocks per stripe wherein 
the number of data blocks, N, equals the number of storage units, H, each 
storing a data block from the stripe, and the M redundant blocks for the 
stripe are stored on J (J less than or equal to M but at least one ) additional 
storage units and the storage requirement for the M redundant blocks is 
rotated among the H+J storage units so the storage requirement is equally 
distributed. 

12. (Amended) The storage system with data rocovory from L fai l od blocks 
p er s trip e of claim 8 wherein the storage system provides additional data 
recovery from J failed storage units or M failed blocks per stripe wherein 
the number of data blocks, N, equals the number of storage units, H t each 
storing a data block from the stripe, and the M redundant blocks for the 
stripe are stored on J (J less than or equal to M but at least one ) additional 
storage units and the storage requirement for the M redundant blocks is 
rotated among the H+J storage units so the storage accesses to the 
redundant blocks are mor e e v e n l y distribut e d uniform. 

13. (Amended) The storage system with data rocovory from L failod blocks 
p e r strip e of claim 8 wherein the storage system provides additional data 
recovery from J failed storage units and L failed blocks per stripe and R 
failed blocks per second stripe within a storage unit or M failed blocks per 
stripe and R failed blocks per second stripe within a storage unit wherein: 

the number of data blocks, N, equals the number of storage units, 
H, each storing a data block from the stripe^ 
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the M redundant blocks for the stripe are stored on J (J less than 
or equal to M but at least one ) additional storage units and 
for S (S>0) blocks stored on a storage unit including one block from 
the stripe, a second error correction code generates R 
redundant blocks from the S blocks and the R redundant blocks are 
stored on that storage unit; 
such that V failed data blocks (V less than or equal to R) b lo c ks-are 
regenerated from the remaining S+R-V blocks of the second strip e and th e 
R redundant b l ocks ar e stor ed o n th a t storag e unit . 
1 4. (Amended) A storage system with data recovery from R failed blocks per 
second stripe within a storage unit and J failed storage units or M failed 
blocks per first stripe across storage units and R failed blocks per second 
stripe within a storage unit comprising; 

N (N>0) data blocks stored on N storage units; and 

a first error correction code that generates M (M>0) redundant 

blocks from the N data blocks whereto the N data blocks and M 

redundant blocks form a first stripe across storage units such that K 

failed data blocks (K less than or equal to M) block s a re 

regenerated from the remaining N+M-K blocks of the first stripe; 

and 

the M redundant blocks are stored on J (J less than or equal to M_ 
but at least one) additional storage units; and 
S (S>0) blocks stored on a storage unit including one block from 
the first stripe and a second error correction code that generates R 
(R>0) blocks from the S data blocks wherein the S blocks and R 
redundant blocks form a second stripe stored w ithin the storage 
unit such that V failed data blocks (V less than or equal to R) blocks 
are regenerated from the remaining S+R-V blocks of the second 
stripe;-and 

— th e R r e dundant b l ocks -a r -e- stor e d on that s torage un i t 
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such that the storage system can regenerate R blocks of failed data 
blocks for an S data blocks stripe within a storage unit and regenerate 
either data blocks for J failed storage units or M failed data blocks per N 
data block stripe across the storage units. 

15. (Amended) The storage system w i th data rocovory from R fai l ed blocks 
p e r second stripe within a stor a g e un i t and J failod storago units or M 
fai l od b l ocks p e r first str i p e acros s s torag e un i ts and R fai l od blocks per 
s e cond str i p e w i th i n a st ora g e unit -of claim 14 wherein the storage 
requirement for the M redundant blocks is rotated among the N+J storage 
units so that the storage requirement is evenly distributed. 

16. (Amended)The storage system w i th data rocovory from R fai l ed b l ocks p e r 
socond strip e within a storag o un i t and J fai le d storago units or M fa il od 
blocks por first strip e across storag e units and R fail e d blocks por s e cond 
ctripo within a storago unit o f claim 14 wherein the storage requirement for 
the M redundant blocks is rotated among the N+J storage units so that the 
storage accesses to the redundant blocks are mor e e v e n l v uniformlv 
distributed. 

17. (Amended) The storage system w i th dat a rocov o ry fro m R fai l od blocks 
por second str i p e w i thin a storag e un i t - and J fa ile d stor a go units or M 
fai lo d b l ocks p o r first stripe across storago unite and R fa il od blocks por 
s e cond str i p e w i th i n a stor a g e un i t of claim 14 wherein L (L less than or 
equal to M) redundant blocks are L copies of the M redundant blocks are 
stored on the storage unit with the most recent data block update w he r e in 
and the storage system provides additional data recovery from R failed 
blocks per second stripe and L failed blocks per first stripe across the 
storage units and J failed storage units wh e r e L (L l e ss than or oqua l to M) 
r e dundant b lo cks ar e L - oop io s of th e M redundant b l ocks ar e stor e d o n t he 
storag e unit w i th th e m o st r e c e nt d a ta b l ock upd a t e. 

18. (Amended) The storage system w i th data rocovory from R failod blocks 
por socond strip e within a storage un i t and J fai l od storago units or M 
fail e d b l ocks per first str i pe across storago units and R fa ile d blocks por 
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sooond strip e within a storag e unit of claim 14 wherein L (L less than or 
equal to M) redundant blocks are L copies of the M redundant blocks are 
stored on the storage unit with the most recent data block update and t he 
storage system provides additional data recovery from R failed blocks per 
second stripe and L failed blocks per first stripe across the storage units 
and J failed storage units whoro L (L l oss than or e qual to M) redundant 
blocks ar e L copi e s of th e M r e dundant b l ocks ar e s tor e d on th e storag e 
unit w i th tho most r e c e nt data b l ock updat e wherein the storage blocks for 
the L redundant blocks are assigned on demand from a pool of storage 
blocks. 



Data Recovery from Multiple Failed Data Blocks and Storage Units 
Application Number 10/706,881 Confidential N. K. Ouchi Page 9 of 9 



PACE 10/12 ■ RCVD AT 3/29/2007 1:34:44 PM [Eastern Daylight Time] ■ SVR:USPTO-EFXRF-6/32 * DNIS:2738300 * CSID:408 555 1212 - DURATION (mm-ss): 03-04 



